try adding cross-origin CORP policy to enable iframe embedding

Author: Rich-Harris

src/hooks.js

@@ -4,6 +4,7 @@ export async function handle({ event, resolve }) {
 
 	response.headers.set('cross-origin-opener-policy', 'same-origin');
 	response.headers.set('cross-origin-embedder-policy', 'require-corp');
+	response.headers.set('cross-origin-resource-policy', 'cross-origin');
 
 	return response;
 }